{"id":"CVE-2021-22769","url":"https://www.cyber-defence.io/tools/cve/CVE-2021-22769","generatedAt":"2026-10-27T20:21:35.876Z","title":"A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Easergy T300 with firmware V2.7.1 and older that could expose files or directory content when access from an attacker is not restricted or incorrectly restricted.","description":"A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Easergy T300 with firmware V2.7.1 and older that could expose files or directory content when access from an attacker is not restricted or incorrectly restricted.","published":"2021-06-11T16:15:11.000Z","lastModified":"2026-06-29T14:16:35.000Z","status":"Modified","sourceIdentifier":"cybersecurity@se.com","cvss":{"version":"3.1","score":4.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},"cwe":["CWE-552"],"affected":["schneider-electric/easergy t300 firmware"],"epss":{"score":0.00652,"percentile":0.50931,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.65%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-02","tags":["Vendor Advisory"],"source":"cybersecurity@se.com"},{"url":"http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-02","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2021-22769","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}